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Abstract 

Interactive proof systems (IP) are very powerful - languages they can accept form exactly PSPACE. 
They represent also one of the very fundamental concepts of theoretical computing and a model of 



C/3 

fi ■ computation by interactions. One of the key players in IP are verifiers. In the original model of IP 

whose power is that of PSPACE, the only restriction on verifiers is that they work in randomized 
04 , polynomial time. Because of such key importance of IP, it is of large interest to find out how powerful 

.*zl I will IP be when verifiers are more restricted. So far this was explored for the case that verifiers 

f~^ ' are two-way probabilistic finite automata (Dwork and Stockmayer, 1990) and one-way quantum finite 

^^^ ■ automata as well as two-way quantum finite automata (Nishimura and Yamakami, 2009). IP in which 

• , verifiers uses public randomization is called Arthur-Merlin proof systems (AM). AM with verifiers 

f— ^ I modeled by Turing Machines augmented with a fixed-size quantum register (qAM) were studied also 

CO ' by Yakaryilmaz (2012). He proved, for example, that an NP-complete language Lknapsacki modeling 

the 0-1 knapsack problem, can be recognized by a qAM whose verifier is a two-way finite automaton 

working on quantum mixed states using superoperators. 

Xj, . 

~,] In this paper we explore the power of AM for the case that verifiers are two-way finite automata 

.^ : ^uh quantuland claLal states (2QCFA) - introduced by Ambainis and Watrous in 2002 - and 

the communications are classical. It is of interest to consider AM with such "semi-quantum" verifiers 
because they use only limited quantum resources. Our main result is that such Quantum Arthur- 
Merlin proof systems (QAM(2QCFA)) with polynomial expected running time are more powerful 
than in the case verifiers are two-way probabilistic finite automata (AM(2PFA)) with polynomial 
expected running time. Moreover, we prove that there is a language which can be recognized by an 
exponential expected running time QAM(2QCFA), but can not be recognized by any AM(2PFA), and 
that the NP-complete language Lknapsack can also be recognized by a QAM(2QCFA) working only on 
quantum pure states using unitary operators. 
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two-way finite automata with quantum and classical states. 



1 Introduction 

An important way to get deeper insights into the power of various quantum resources and opera- 
tions is to explore the power of various quantum variations of the basic models of classical automata. 
Of a special interest is to do that for various quantum variations of the classical finite automata, 
especially for those that use limited amounts of always expensive quantumness - quantum resources: 
states, correlations, operations and measurements. This paper aims to contribute to such a line of 
research. 

There are two basic approaches how to introduce quantum features to classical models of finite 
automata. The first one is to consider quantum variants of the classical one-way (deterministic) finite 
automata (IFA or IDFA) and the second one is to consider quantum variants of the classical two-way 
finite automata (2FA or 2DFA). Already the very first attempts to introduce such models, by Moore 
and Crutchfields [H] as well as Kondacs and Watrous [T7] demonstrated that in spite of the fact that 
in the classical case, IFA and 2FA have the same recognition power, this is not so for their quantum 
variations (in case only unitary operations and projective measurements are considered as quantum 
operations). Moreover, already the first model of two-way quantum finite automata (2QFA), namely 
that introduced by Kondacs and Watrous, demonstrated that quantum variants of 2FA are much 
too powerful - they can recognize even some non- context free languages and are actually not really 
finite in a strong sense [17] . It started to be therefore of interest to introduce and explore some "less 
quantum" variations of 2FA and their power [llEllSlElISlIIHlIIHlEOllSOllST]. 

A "hybrid" quantum variations of 2FA, namely, two-way finite automata with quantum and classical 
states (2QCFA) were introduced by Ambainis and Watrous [3]. Using this model they were able to 
show, in an elegant way, that already an addition of a single qubit to a classical model can much 
increase its power. A 2QCFA is essentially a classical 2FA augmented with a quantum memory of 
constant size (for states of a fixed Hilbert space) that does not depend on the size of the (classical) 
input. In spite of such a restriction, 2QCFA have been shown to be more powerful than two-way 
probabilistic finite automata (2PFA) [3|I34 [ [35 ] . 

In mid 1980s, Babai [4] and Goldwaser et al. [T^, independently, introduced so-called interactive 
proof systems with unlimited power provers and polynomial power randomized verifiers. A famous 
result of [27j, stated as IP=PSPACE, that languages recognized by IP are exactly those from PSPACE, 
demonstrated enormous power hidden in simple interactions of IP. 

It is therefore natural to explore power also of some weaker variations of IP. Since unlimited power 
of provers seems to be very essential for the whole concept of IP, the research started to focus on the 
cases with limited power verifiers. This has been done at first by Dwork and Stockmeyer [5] - they 
explored the case that verifiers are two-way probabilistic finite automata (IP(2PFA)). They showed that 
every language in the class EXP can be accepted by some IP(2PFA). However, the set of languages 
recognized by such IP in which verifiers use public randomization (also called Arthur-Merlin proof 
systems) is a proper subset of P. Later, Nishimura and Yamakami j23l explored the case that verifiers 
are modeled by one-way quantum finite automata as well as two-way quantum finite automata and 
demonstrated strengths and weaknesses of both IP. 



Of importance is also a variant of IP, called Arthur-Merlin proof systems (AM). The difference be- 
tween IP and AM is that the prover of IP has at each step only partial information of the configuration 
of the verifier while the prover of AM always has complete information of the current configuration 
of the verifier. Also for such interactive proof systems it is of importance to explore their power for 
the case that verifiers have a more limited power and to find out relations between IP and AM with 
verifiers of different power. AM with verifiers modeled by Turing Machines augmented with a fixed- 
size quantum register (qAM) were studied also in |33[ 15^ and it was shown that the an NP-complete 
language Lknapsack , modeling the 0-1 knapsack problem, can be recognized by a qAM whose verifier 
is a two-way finite automaton working on quantum mixed states using superoperators. In Yakaryil- 
maz's notation, two-way finite automata working on quantum mixed states using superoperators are 
called 2QCFA. However, 2QCFA as defined originally in [3], are working only on quantum pure states 
using unitary operators. They can be simulated efficiently by two-way finite automata working on 
quantum mixed states, but whether two-way finite automata working on quantum mixed states can 
be simulated by 2QCFA, or not, is unknown. The model of 2QCFA we use is that of [2j and it is 
weaker, actually a special case, of the model used in [331 [31]. Our results concerning the acceptance 
of the language Lknapsack are therefore stronger. 

Our model will be denoted as QAM(2QCFA). One can see this model also as a classical AM 
augmented with a quantum memory of constant size - to store quantum states of a fixed Hilbert 
space - that does not depend on the size of the (classical) input. Our main results show that such 
models are more powerful than AM(2PFA) - that is AM with 2PFA as verifiers, and the NP-complete 
language can be recognized by QAM(2QCFA). 

The paper is structured as follows. In Section 2 all models involved are described in detail. After 
that we show for the language Lmiddie = {xay \x,y € {a, 6}*, |a;| = |y|} that for any < e < 1/2 there 
is a QAM(2QCFA) A{P, V^) - with the prover P and the verifier V^ that accepts Lmiddie with one- 
sided error e in a polynomial expected running time - notation (3^M(ptinie-2QCFA). This language 
cannot be recognized by any AM(2PFA) in polynomial expected running time, as shown in [9]. As 
the next we show, for the language L„ipa/ = {xax^ \x € {a, &}*}, that for any < £ < 1/2 there is a 
QAM(2QCFA) A{P, Ve) that can recognize Lmpai with one-sided error e in an exponential expected 
running time. We will prove that this language cannot be recognized at all by an AM(2PFA). These 
results show that QAM(2QCFA) are more powerful than AM(2PFA). Afterwards we show that there 
is an NP-complete language, namely Lknapsack^ modeling the 0-1 knapsack problem, that can be 
recognized by QAM(2QCFA) in an exponential expected running time. Finally, we discuss languages, 
Li = {w\ 3s, t,u,v e {a, 6}*, w — sbt = uhv, \s\ = \v\} and L2 — {w\ 3s, t,u,v G {o, 6}*, w = sat = 
ubv, \s\ = \v\}, that can be recognized by QAM(ptime-2QCFA). The language Li is proved to be 
nonstochastic. The language L2, the set of nonpalindromes, is stochastic [TO] . 

The fact that the non-regular language Lmiddie can be recognized by a QAM(ptime-2QCFA) and 
it seems that it can not be recognized by a 2QCFA, indicates that QAM(ptime-2QCFA) are likely 
more powerful than 2QCFA. Interesting enough, this situation seems to be different for 2PFA. It is 
still an open problem to find out whether there is a non-regular language that can be recognized by 
AM(ptime-2PFA), but we know that any 2PFA needs exponential time to recognize a non-regular 
language [51 I13j . 



2 Basic models 

At first we introduce formally the model IP(2PFA) and afterwards also the model QIP(2QCFA). 
Concerning basics of quantum computation we refer the reader to |14l 122] , and concerning basics of 
classical and quantum automata we refer the reader to [TH [TSl [111 [Ml [H] • 

2.1 Model IP(2PFA) 

Notation: A coin-tossing distribution on a finite set 5 is a mapping : S" — > {0, 1/2, 1} such that 



A 2PFA verifier 



X^X^Xi X 



Read only tape head 



Classical 

Control 

Unit 



A source of 
randomness 



Communication 
Cell 



A p rover 



Read only tape head 



Powerful processor 



Read/write tape head 



An infinite tape 



Figure 1: A schematic model of an IP(2PFA) 

Definition 1. An fP(2PFA) A = {P,V), where P is a so called prover and T^ is a so called verifier 
(that are specified bellow and communicate through a communication cell as illustrated in Figure [1]). 

An action of A starts with a step of the verifier. The verifier's head scans the left end-marker, and 
the verifier writes a symbol to the communication cell. That is followed by an action of the prover 
who writes its response into the communication cell. Such rounds of steps continue until the verifier 
decides to end it. 

The verifier T^ is a 2PFA specified as follows: V = {S, E, S, sq, Sacc, Srej), where 

1. 5 is a finite set (of classical states) partitioned into subsets R, C, H of reading, communication 
and halting states, respectively. 

2. Sq £ R is the initial reading state. 

3. H is partitioned into sets Sacc and Srej of the accepting and rejecting states. 

4. S is a finite input alphabet that is extended into the alphabet S' = E U { (|, $}, where (|: ^ E 
will be used as the left end-marker and $ ^ S will be used as the right end-marker. F is a 
communication alphabet (shared by both the verifier and the prover). 
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5. (5 is a transition mapping defined as follows: 

(a) For each reading state s £ R and a G S', 6{s,a) is a coin-tossing distribution on S* x 
{ — 1,0,1}, where —1,0 and 1 specify the tape head move - one cell left, no move, one 
cell right. It is assumed that 6 is well defined in the sense that on end-markers it never 
determines a move outside of the tape region separated by end- markers 4 and $. Therefore 
S specifies, for each state of the control unit and each symbol on the tape, the probability 
that the control unit will be in a particular new state and that the tape head moves in a 
particular direction. 

(b) With each communication state s € C, a unique communication symbol 7^ is associated. 
In the case the verifier is in such a communication state s, then it writes 7^ in the com- 
munication cell and then the prover gets into an action. It reads the symbol stored in 
the communication cell and, depending on the whole communication history and the input 
string (that is the same for both the prover and the verifier), the prover writes a symbol 
7 G r into the communication cell. Afterwards the verifier gets into the action that de- 
pends on its current state and on the symbol in the communication cell. For each pair 
s £ S and 7 e F a coin-tossing distribution function on the set S is defined that determines 
the probability for each state from S that it should be the next state of the verifier. At 
such after-communication step the head of the verifier does not move. 

(c) The verifier halts when it gets into a halting state. Therefore there is no need to define 6 
on states in H. 

The prover P is all-powerful and at each communication step what the prover writes into the 
communication cell depends on the whole input and the whole communication history up to that 
point of communication. Namely, it is determined, for an input string x and communication history 
y G F* to that point, by a coin-tossing distribution p{x, y) defined on F. 

Note. The communication cell always holds a symbol from the communication alphabet F. When- 
ever the verifier needs some information from the prover, the verifier writes a request to the commu- 
nication cell via a symbol from the alphabet F and the prover responds. The verifier then continues, 
probabilistically, depending on the prover's respond. 

Remark 1. In the above definition, the prover's understanding of the verifier's computation is only 
through the communication cell that can contain information only from the finite set F. This mode of 
communication is called private coins [llj or partial information [7] . One can consider also IP in which 
the prover has complete information on the current configuration of the verifier. Such a communication 
mode is called public coins jTTj or complete information [^ mode. In Babai's terminology, an IP with 
the public coins communication mode is called Arthur-Merlin proof system (AM). In an AM(2PFA), 
the verifier in each step automatically sends its configuration information, that is the communication 
symbol corresponding to the communication alphabet contains an element of 5* x {—1,0, 1}, that is, 
the current state and the last move of the head, to the prover through the communication cell in every 
computation step. This information is sufficient for the all-powerful prover to keep the track of the 
configuration of the verifier because the prover knows the strategy of the verifier. 

The computation of (P, V) on an input string w starts with the string i^w% on the input tapes of 
both the verifier and the prover. The tape head of the verifier is positioned on the left end-marker ij; 



and the verifier begins to act with the initial state sq in its control unit. The action of the verifier and 
the prover in the next steps is then governed (probabilistically) by the transition functions 6 and p, 
as defined above, until the verifier enters a halting state. For a particular input w and a halting state 
s let Pr(^pY){w,s) be the probability that IP {P,V) halts its computation on w in the state s. The 
probability that the verifier halts in a halting state s on the input w is taken over all random choices 
of the verifier and the prover. If s is in an accepting (a rejecting) state, then the input is accepted 
(rejected). 

The prover- verifier pair {P, Vs) is an AM(2PFA) for (accepting) a language L C S* with an error 
probability e < 1/2 if 

1. (Completeness condition): for all w £ L, Pr[(P, Ve) accepts w] > 1 ~ e, and 

2. (Soundness condition): for all w ^ L and any prover P* , Pr[{P* , V^) rejects w] > 1 — e. 

We say that a language L is recognized by AM(2PFA) if for some e < 1/2, there is an AM(2PFA) 
(P, Ve) that accepts the language L with the error probability e. 

2.2 Model QIP(2QCFA) 

2QCFA were introduced by Ambainis and Watrous [3] and explored by Qiu, Yakaryilmaz and 
others [251 1301 1311 133. Informally, a 2QCFA can be seen as a 2DFA with an access to a quantum 
memory for states of a fixed Hilbert space upon which at each step either a unitary operation is 
performed or a projective measurement and the outcomes of which then probabilistically determines 
the next move of the underlying 2DFA. 

A quantum analogue of IP was introduced by Watrous in 2003 [28] and since then the study of 
QIP has become an interesting and important topic of quantum complexity theory. In particular, 
quantum analogues of Babai's Arthur-Merlin proof system called now quantum Arthur-Merlin proof 
system (QAM) have drawn a significant attention j^HlSlllSS]. In [351133], for Arthur- Merlin IP verifiers 
are augmented by a fixed-size quantum memory. In 23 one-way quantum finite automata (both of 
the measure-many and measure-once types) and two-way quantum finite automata are considered as 
verifiers. 

In this paper, such IP are mainly considered in which verifiers are not 2PFA, as in [53], but 
2QCFA and the verifier and the prover have just classical communication. More exactly, verifiers are 
augmented by a quantum memory size of which does not depend on the size of the input. The formal 
definition is as follows: 

Definition 2. A QIP(2QCFA) is given by a pair (P,V), where P is a prover and V is a verifier, as 
illustrated in Figure [51 and the prover communicate classically with the verifier through a special 
communication cell. 

In such a QIP(2QCFA) (P,V), the verifier F is a 2QCFA A = (Q, S, S, P, Q, d, |qo), so, Sacc, S'rej), 
where 

1. Q is a finite set of an n basic orthonormal quantum states. 
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Figure 2: A schematic model of a QIP(2QCFA) 

2. S is a finite set of classical states that is partitioned into subsets R, C, H of the reading, com- 
munication and halting states.. 

3. S is a finite set of input symbols extended to the tape symbols E' = E U {(j:, $}, where i^ is used 
as the left end-marker and $ is used as the right end-marker. 

4. r is a finite set of communication symbols. 

5. |(7o) G Q is the initial quantum state. 

6. So is the initial classical state. 

7. The set H is partitioned into subsets Sacc and Srej of the accepting and rejecting states. 

8. e is a mapping 6 : i? x E' ^ U{H{Q)) U 0{H{Q)), where U(H(Q)) and 0(H(Q)) are sets of 
unitary operations and projective measurements on the Hilbert space generated by quantum 
states from Q. 

9. 5 is a classical transition function defined as follows. 

(a) For each reading state s G R and a tape symbol a 

i. If Q{s,(t) e U{H{Q)), then the unitary operation 9(s,cr) is applied on the current 
state of quantum memory to produce a new quantum state and, in addition, if 

6: RxT,' ^ Sx {-1,0,1}, 

then, for the case S{s,<t) — {s',d), the new classical state of the verifier is s' and its 
head moves in the direction d. 

ii. If 9(s,7) e 0{H{Q)), then 0(s, cr) is a projective measurement with a set of possible 
eigenvalues i?e(s,A) = {'^i, ■ • • , ^n} and projectors {Pi, . . . , Pn}, where Pi is the pro- 
jector onto the eigenspaces generated by eigenvectors corresponding to A^. In such a 
case 

S^,,,y.E^S x{-l,0,l} 



and <5(s,CT)(Ai) = {s',d) means that when the projective measurement outcome is Xi, 
then the new classical state is s' and its head moves in the direction d. 

(b) With each communicating state s G C a communication symbol 7s is associated. For each 
s E C and 7 G F, S{s, 7) G S. This has the following meaning: If the verifier gets into a 
state s G C, it writes 7^ into the communication cell and then the prover, depending on the 
whole communication history and on the input w writes a 7 G F into the communicating 
cell and the verifier comes into the action. If 6(3,^) — s' , then s' is the new state of the 
verifier and the tape head of the verifier does not move. 

(c) The verifier halts and accepts (rejects) the input when it enters a classical accepting (re- 
jecting) state from H. 

The prover is a processor of an unlimited power as in the general case of IP. 

Remark 2. A QIP(2QCFA) is a QAM(2QCFA) if the verifier sends, at the end of each its commu- 
nication round through a communication symbol information about its current configuration, that 
is an element of 5 x { — 1,0,1} x E, where E is the set of all possible measurement outcomes, that 
is the communication symbol contains the current classical state, the last move of the head and the 
projective measurement outcome (let a special symbol is used if there was no measurement in the 
computation step), to the prover through the communication cell in every computation step. This 
information is sufficient for the all-powerful prover to keep the track of the configuration of the verifier 
because the prover knows the strategy of the verifier. 

The computation of QIP(2QCFA) with a prover P and a verifier V on an input lu G S* starts 
with the string ^x$ on the input tapes of both of them. At the start, the tape head of the verifier is 
positioned on the left end-marker and the verifier begins the computation in the classical initial state 
and in the initial quantum state. In each of the next steps, if the current classical state of the verifier 
is s and the current quantum state of the verifier is l-tp) and the scanning symbol is ct, then quantum 
and classical states are changed according to Q{s,a) and 6 as follows. 

1. If s G i?, then: 

(a) If 0(s, cr) is a unitary operation U, then U is applied on the current quantum state \ip), 
changing it into the quantum state U\ip), and S{s, a) — (s', d) makes s' to be a new classical 
state and the head moves in the direction d. If s G Sacc (s G Srej), then the input is accepted 
(rejected). 

(b) If 0(3,(7) is a projective measurement, then the current quantum state is changed to 
Pj|V')/||^j|V')ll with the probability ||-Pj|V')lP and in such a case S(s.cr) is a mapping from 
the set of potential classical outcomes (eigenvalues) of the measurement to 5* x {—1,0, 1}. 
In particular, if the measurement coutcome is Xi and S(^ga-^{Xi) = {s',d), then: 

i. if s' G S* — -ff , then s' is the new classical state and the head moves in the direction d; 
ii. if s' G Sacc (s' G Srej), then the verifier accepts (rejects) the input and computation 
halts. 

2. If the current classical state s G C, then the verifier sends 7^ to the prover through the commu- 
nication cell. Depending on this and all previously obtained symbols from the verifier, as well 



as on the input string, the prover sends to the communication cell a symbol 7. If S{s,^) ~ s', 
then s' will become the new classical state of the verifier and the input head does not move. In 
case s' G Sacc (s' G Srej) the input is accepted. 

The probability that an input world is accepted is defined in a similar way as in the case of 2QCFA. 

The prover-verifier pair {P, I4) is a QAM(2QCFA) for (accepting) a language L C S* with one- 
sided error 0<e<l/2if 

1. Completeness condition: for all w E L, Pr[{P, V^) accepts w] = 1, and 

2. Soundness condition: for all w ^ L and any prover P* , Pr[{P* , V^) rejects w] > 1 — e. 

We say that a language L is recognized by QAM(2QCFA) if for some e < 1/2 there is a QAM(2QCFA) 
(P, V^) that accepts the language L with one-sided error e. 

3 Examples of languages recognized QAM(2QCFA) 

In this section we provide a detailed proof for several languages that they are accepted by QAM(2QCFA). 

3.1 Recognition of the language L^iddie 

The importance of the fact that the language Lmiddie can be recognized by a QAM(ptime-2QCFA) 
is underlined by the fact that there is no AM(ptime-2PFA) for this language [9]. 

Theorem 1. For any e < 1/2 there exists a QAM(2QCFA) A^ with a verifier-prover pair (P, V^) for 
the language Lmiddie with one-sided error e in the expected running time O (- [n + n^ log -j), where 
n is the length of the input. 



Repeat the following steps ad infinity: 

1. Move the tape head to the symbol that is next to the left end-marker. 

2. Ask the prover whether the currently read symbol is the middle one. 

2.1 If the answer is "no", move the head to the right, apply transformation Ua and repeat Step 2. 

2.2 If the answer is "yes" and the scanned symbol is not a the verifier rejects the input; otherwise 
the verifier moves the head one cell to the right and proceeds according to Step 3. 

3. Until the scanned symbol is the right end-marker, apply U-a to the current quantum state and 
move the head one cell to the right. 

4.0 When the right end-marker is reached, measure the quantum state in the basis {|(Jo), I?!)}- 

4.1 If the result is \qi), the input is rejected. 

4.2 Otherwise repeat the following subroutine two times: 

4.2.1 Move the head to the first symbol right to the left end-marker. 

4.2.2 Until the currently read symbol is one of the end-markers simulate a coin-flip and move 
the head right (left) if the outcome of the coin-flip is "head" ("tail"). 

5. If the above process ends both times at the right end-marker, simulate k coin-flips and if all outcomes 
are "head", then accepts the input. 



Figure 3: Description of the behavior of the verifier Ve in a QAM recognizing the language Lmiddie- 
The choice of k depends on e, as discussed in the text. 



Proof. At first we present informally the main idea of the proof. A 2QCFA verifier V^ uses quantum 
memory with states generated by two orthogonal quantum states \qo) and \qi), where |go) will be the 
initial quantum state. At the beginning the input is shared by both the verifier and the prover. In the 
first part of the interaction/computation process, until the middle symbol is reached, for each input 
symbol a the verifier does the following. 

It applies the following unitary transformation Ua, a — V2tt, 

Ua\qo) = cos a\qo) + sin a\qi), Ua\qi) ^ - sin a\qo) + cos a\qi), (1) 

to the current quantum state (that is the state is rotated by the angle a) and asks the prover whether 
the next symbol is the middle one. The all-powerful prover provides the answer. If the next symbol 
is not the middle one, the verifier moves its head one cell to the right and this process repeats. When 
the symbol in the middle is reached, the verifier checks whether it is the symbol a. If not, the verifier 
rejects the input; otherwise it continues to read the input, symbol by symbol, and each time it applies 
the unitary transformation C/_q to the current quantum state (and therefore this quantum state is 
rotated by the angle —a) until the right end-marker is reached. (During this process the verifier has 
no need to get any information from the prover.) 

When the right end-marker is reached, the verifier measures the current quantum state in the basis 
Iko); ki)}- If ki) is the resulting quantum state, the input is rejected, otherwise the verifier proceeds 
as shown in Figure [S] 

Lemma 2. // the input w € Lmiddie, then the quantum state of the verifier V^ will evolve with certainty 
into \qo) when the right end-marker is reached in Step 4- 

Proof. If ui G Lmiddiei then there are strings x,y £ E* such that \x\ ~ \y\ and w — xay. Since the 
all-powerful prover can tell the verifier for sure when the middle symbol is reached, the quantum state 
when the right end-marker is reached is 

C\\y\/ \ 1=^1 

cos a -sma \ / cos a sma \ 
. ko) (2) 

sm a cos a I \ — sm a cos a I 

I cos \y\a -sin|y|a \ / cos |x|a sin|a;|aV ,_/! oV 

- . I I II . I I II I*?"/ ~ A 1 1*^0/ ~ \10'- v"^'' 

\ sm|j/|a cos|j/|a / \ — sm|a;|a cos |a;|a / \ 1 / 

D 
Lemma 3. \35}/ A coin flipping can be simulated by the verifier Ve using states ko) o,nd \qi) . 

Lemma 4. |^ If the input w G Lmiddie, then the execution of loops in the steps 4. 2 and 5 leads to 
the acceptance with the probability „)., \-.\-i . 

It may happen that the process described in Figure [3] does not terminate. This happens only if 
the result of the last coin-flip is "tail" and this happens either when the left end-marker is reached in 
Step 4.2 or this happens in Step 5. In such a case the quantum state of the verifier is ko) and a new 
iteration of the process starts. 

Completeness condition: If w e L„iiddie, then the quantum state of the verifier after Step 4.0 is 
ko) and the input is never rejected in Step 4.1. After the rest of the steps, in 4.2 and 5, the probability 
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of accepting the input is, if we denote n — \w\, Pa ~ l/{2''{n + 1)^) according to the previous lemma, 
and the probabihty of rejecting the input is Pr = 0. If the whole process is repeated for infinitum, 
the accepting probability is 

Pr[{P*,V,) rejects w] = ^(1 - PaTil PrfPa = „ ^ p^°_ „ „ =^ = ^- (4) 

Soundness condition: Let the input string w ^ Lmiddie and n— \w\. Observe that the verifier, 
in its communication with the prover, waits only for the information that the currently read symbol 
is in the middle and let this comes after reading < ?Ti < n symbols in the input string (this m can 
be different at different iterations and for different provers). 

Lemma 5. If w ^ Lmiddie, then the verifier rejects the input for any prover after Step 4^.1 with 
probability at least l/(2ri^ + 1). 

Proof. Suppose that a prover P*, after m steps, informs the verifier that the next symbol is the middle 
one. If w does not have the form xay, |x| — to, then w is rejected in Step 2.2. 

li w — xay with \x\ = to,, then, before the measurement in Step 4.0 the quantum state of the 
verifier will be 

C\ n—m—l / \ m 

COS a — sin a \ I cos a sin a \ , , 

. ko> (5) 

sm a cos a I \ — sm a cos a I 

(cos(n — m — l)a — sin(n — to, — 1)q: \ / cosTTia sinTTio: \, , 
sin(n — ?7i — Ijo; cos(n — m — l)a I \ —smma cosma I 

(cos(n — 2m — l)a sm(n — 2m — l)a \ , , 
siii(n — 2m — l)a cos(n — 2m—L)a I 

— cos ((n — 2to — l)a) \qo) + sin {{n — 2m — l)a) \qi). (8) 

The probability of observing \qi) is sin^ {V2{n — 2m — l)7r) in Step 4.0. Without a loss of general- 
ity, we assume that n—2m—l > 0. Let / be the closest integer to ^/2{n—2m—l). li ^/2{n—2m—l) > I, 
then 2(n-2TO- 1)2 > P. So we get 2(n-2TO- 1)^-1 > P and/ < ^2(n - 2to - 1)2 - 1. Therefore 



V2{n -2m-l)-l> V2{n - 2m - 1) - yj2(n - 2m - Xf - \ (9) 



(\/2(n - 2m - 1) - ^2{n -2m- Xf - l)(\/2(n - 2m - 1) + ^2{n -2m- Xf - 1) 
^/2(n - 2m - 1) + ^2(n-2m-~ 1)2- 1 

1 



>in^, 7. 77- (11) 



V2(n - 2m - 1) + ^2(n - 2to - 1)2 - 1 2^(n - 2m - 1 

Because I is the closest integer to \/2{n — 2m — 1), wc have < ^/2{n — 2m — I) — I < 1/2. Let 
f{x) — sin{xTi) — 2x. We have f"{x) — — 7r2 sin(.T7r) < when x E [0,1/2]. That is to say, f{x) is 
concave in the interval [0, 1/2], and we have /(O) = /(1/2) = 0. So, for any x G [0, 1/2], f{x) > 0, 
that is sin(a;7r) > 2x. Therefore, we have 

in2(^/2(n - 2to - l)7r) = sin2 ({V2{n - 2m - 1) - l)?:) (12) 
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sm 



> (2{V2{n - 2m - 1) - l)\ = A (V2{n - 2m - 1) - l\ (13) 



^^V2\/2(n-2m-l)j 2(n - 2m - 1)2 ^ 2(n - 2m - 1)2 + 1 ' ^^^^ 

If V2(n - 2m - 1) < /, then 2{n - 2m - 1)2 < P. So we get 2(71 - 2m - 1)2 + 1 < P ^nd 
I > \/2{n — 2m — 1)2 + 1. We have therefore 

V2{n -2m-l)-l< V2{n - 2m - 1) - y^2{n - 2m - 1)2 + 1 (15) 

V2in - 2m - 1) - ^2(n - 2m - 1)2 + l) f \/2(n - 2m - 1) + ^2(n-2m- 1)2 + l) 

^ ; ^ (16) 

V2(n - 2m - 1) + ^2(n - 2m - 1)2 + 1 

= ^ < — 17 

72(71 - 2m - 1) + ^2(n - 2m - 1)2 + 1 2^2(7^ - 2m - 1)2 + 1 

and this implies that 

Z-\/2(n-2m- 1) > , (18) 

272(n- 2m -1)2 + 1 

Because Z is the closest integer to \/2{n — 2m — 1), we have < / — \/2{n — 2m — 1) < 1/2. Therefore, 
sin^ (\/2{n - 2m - l)7r') = sin^ (iV2{n - 2m - 1) - 1)tt] (19) 

= sin^ ({I - V2{n - 2m - l))7r') > (2{l - V2(7i - 2m - 1))] (20) 

= 4:(l-V2(n-2m-l)) >4| ] ^— -.^ . (21) 

V ^ V \^2v/2(n-2m-l)2 + iy 2(n - 2m - 1)2 + 1 ^ ' 

As < 771 < 77,, we have [77 — 2r?7 — 1| < n, and therefore 

> :^Z^^- (22) 



2(n- 2m -1)2 + 1 2772 + 1 
So the lemma has been proved. D 

If w ^ Lfniddie, then for any prover P* the above verifier rejects the input after Step 4.1 with the 
probabihty 

2n^ + 1 
according to Lemma [S] Moreover, after the last two steps the verifier accepts w with the probabihty 

1 

2'=(77+l) 



Pa = T^TTT^- (24) 



fc-i 



If fc = 1 + riog2 l/el , then e > 1/2 

If the whole process is repeated indefinitely, then the probability that the verifier rejects the input 
w for any prover P* is 
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Pr[{P\V,) rejects w] = ^(1 - P,)'(l - PrYPr = „ ^ /^ „ „ > 77^ (25) 

^ l/(2n^ + 1) ^ (n + l)V(2n^ + l) 

e/2(n+l)2 + l/(2n2 + l) e/2 + (n + 1)7(2^2 + 1) ^ ^ 

If we now denote ,f{x) — ,^ = 1 — -r-jV^, then /(x) is monotonously increasing in (0, +cx)) and 
since (n + Xf ji^n^ + 1) > 1/2, we have 

Pr{[P\V,) rejects w\ > jj^^^ - JTi ^ ^ " ^^ ^^^^ 

If \w\ = n, then Steps 1 to 4.1 takes 0(n) time, the loops 4.2 takes 0{n'^) time, and Step 5 takes 
0{k) time. The expected number of the repetitions of the algorithm is 0(2'^ri2) in both cases. Hence, 
the expected running time of (P, V^) is O (^ (n* + n^ log i)) . D 

Remark 3. Concerning the expected running time, if the algorithm halts with the probability h(n) : 
N — > [0, 1] in one iteration, then the expected number of repetitions till the algorithm halts is 

+00 , 

J2(l-h{n)y-'hin)xz = j^^. (28) 

The halting probability in one iteration in Figure [3] is ^(^fc^), so according to Equality [28l the 
expected numbers of iterations of the algorithm is 0{2''n'^). 

Theorem 6. Interactive proof systems QAM(ptime-2QCFA) are more powerful than AM(ptime- 
2PFA). 

Proof. The fact that a coin- flipping can be simulated perfectly by 2QCFA in polynomial time, see [34] . 
implies that 2PFA can be simulated in polynomial time by 2QCFA and therefore QAM(ptime-2QCFA) 
are at least as powerful as AM(ptime-2PFA). By [9 , the language Lmiddie cannot be recognized by 
AM(ptime-2PFA) and this implies that QAM(ptime-2QCFA) are more powerful than AM(ptime- 
2PFA). D 

3.2 Recognition of the language L^pai 

We show now that the language Lmpai = {xax^ \ x e {a, fo}*}, which cannot be recognized at all by 
AM(2PFA), as shown later, can be recognized by QAM(2QCFA) in an exponential expected running 
time. 

Theorem 7. For any e there is a QAM(2QCFA) A^ with a verifier-prover pair (P, V^) accepting the 
language L^pai with one sided error e in the exponential running time O I n log - • 2" '°^ ~ ) , where 
n = \w\ is the length of the input w. 

Proof. In the QAM described in the following, the prover is used only to determine, for the verifier, 
the middle symbol of the input. 

At the beginning of the actions of the QAM, both the verifier and the prover share an input string 
w. The verifier V^ starts with the head at the left end-marker, in the initial classical state sq and 
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Repeat ad infinity: 

1. Move the tape head to the riglit of the left end-marl^er. 

2. If the scanned symbol is o" and the prover responds negatively to the question of the verifier whether 
the reading head is in the middle, then the verifier applies the operation Ua to the state in its 
quantum memory and the head is moved one cell to the right and Step 2 is repeated. Otherwise, go 
to the next step. 

3. If the scanned symbol is b (a) and the Prover informs the verifier that the head scans the symbol 
in the middle of the input string, the input is rejected (the head is moved to the next cell and the 
process goes to Step 4). 

4. Until the scanned symbol a is the right end-marker, the operation U~^ is applied to the verifier's 
quantum state and the head moves one cell to the right. 

5. When the right end-marker is reached, the quantum state of the verifier is measured in the basis 
{\<lo); |i?i)i I92)}- If the outcome is not \qo), the input is rejected; otherwise go to the next step. 

6. Move the head to the cell on the left from the right end-marker and set a special register flag to 0. 

7. Until the currently scanned symbol is not the left end-marker, do the following: Simulate k coin-fiips. 
Set flag to 1 if not all outcomes are "heads". Move the head one cell left. 

8. If flag =0, accept. 



Figure 4: Description of the behavior of the verifier V^ of the QAM (P, V^) when the language Lmpai 
is recognized. The choice of k depends on e, as discussed in the text. 

in the initial quantum state |go) and keeps moving its head, cell by cell, till the right end-marker is 
reached, following the rules described informally in Figure IH where 



(29) 



are unitary matrices that will be applied on verifier's quantum states in the Hilbert space spanned by 
three orthonormal basis states |go), \qi) and \q2)- 

An application of the unitary matrices on these basis states can also be described as follows 




t/ako> = t|go)-f|gi) 


Ub\qo) = |ko) - fk2 


C/a|gi) = |M + ||gi) 


Ub\qi) = \qi) 


Ua\q2) = |<Z2) 


Ub\q2) = fko) + |k2 



Let us now describe more formally the actions of the verifier Ve for an input w with \w\ — n. 

Completeness condition: After the start, in each round, the verifier Ve keeps asking the prover 
whether the symbol currently scanned is in the middle of the input, until he gets a positive reply. 
After that the verifier has no need to get more information from the prover. 

Lemma 8. // the input w — xax^ , then the quantum state of the verifier V^ after Step 4 is the 
quantum state {qo). 

Proof. Let x — a;ia;2 ■ ■ ■ xi for all Xi e {a, b}. After Step 4 the quantum state will be 

1^) = U-^'U-^' ■ ■ ■ U-^'U,, ■ ■ ■ U,,U,, \qo} = \qo}. (30) 

D 
Lemma 9. An execution of Steps 6 to 8 leads to an acceptance with probability 2^*^". 
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Proof. The probability that at the end of Step 8 flag = is 2 ''". This is therefore the probabihty 
that the input is accepted in Step 8. If this is not the case, a new iteration starts in the state \qa). D 

If the input w € Lmpah then the verifier never rejects the input in Step 5. After Steps 6 to 8 the 
input is accepted with the probabihty Pa = 2"^^" and is rejected with the probabihty Pr = 0- If the 
whole computation process is repeated indefinitely, the accepting probability is 

Pr[{P*,V,) rejects w] = ^(1 - P„)*(l - P^fPa - „ ^ p^°_ „ „ = ^ = 1- (31) 

i>0 

Soundness condition: For a three dimensional vector w, let u[i] denotes its z-th component. 
Lemma 10. !35] Let 



U = Y-\..Y-^X,r^...Xl{l,Q,Qf 



where Xj,Yj £ {A,B}. If Xj ~ Yj for all 1 < j < m and I — m, then u[2]^ + u[3]^ = 0; otherwise 
w[2]2+m[3]2>5-(™+'). 

Lemma 11. // the input string w ^ Lmpai, then for any prover P* the verifier V^ rejects w after Step 
5 with the probability at least 5^~". 

Proof. Suppose that a Prover P* informs the verifier after scanning the (tti + l)-st symbol that it is 
the symbol in the middle of the input string. 

If the input string w is not of the form xay with |a::| = m, then the verifier rejects the input in 
Step 3. Assume now that w — xay, \x\ — m, \y\ = I and y ^ x^. 

Let X = 2;iX2 • • • Xm and y — yiy2 ■ ■ ^yi- Starting with the state |go)i the verifier V^ changes its 
quantum state after the loop 4 to: 

1^) = U-^' ■ ■ ■ Uy,'U-^^U,,^ ■ ■ ■ U^^U^Mo)- (32) 

Let IV-) = f3o\qo) + Aki) +^2|g2)- According to LemmaUHl /3^ + /3| > 5-("+'). Therefore, if in Step 
5, the quantum state \ip) is measured, then the input is rejected with the probability P^ = /3^ + /3| > 

If w ^ Ljnpaii then, according to Lemma [TTI for any Prover P* the verifier T4 rejects the input 
after Step 5 with the probability 

Pr > 5I-" (33) 

and the input is accepted after Steps 6 to 8 with the probability 

Pa = 2-'=". (34) 

If the whole computation process is repeated indefinitely, the probability that the verifier rejects the 
input is (taking into the consideration that k > max{log5,log -}) 



Pr[(P*,K) rejects w] =^(1 - P,)'(l - P^yPr = r. ^p'_pp (35) 

P 5^^^ 1 
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Time analysis: Steps 1 to 5 take 0(n) time and Steps 6 to 8 O(fcn) time. Tlie lialting proba- 
bility is n (jT^r) in botli cases, so the expected number of repetitions of the above process is 0(2*^") 
in both cases. Hence the expected running time of the QAM {P,Ve) is 0{kn ■ 2^^) and therefore 
oflogi •n-2"i°si 



D 

In order to prove that the language Lmpai cannot be recognized by AM(2PFA) the following Lemma 
will be used. 

Lemma 12. /P/ Let a language L Q Y,* . Suppose there is an infinite set I of positive integers 
such that, for each m G /, there are an integer N(m) and multisets Wm — {wi,W2, ■ ■ ■ ,WN{m)}! 
Um = {ui,U2,- ■ • , Ufqi^^) } and Vm = {wi , W2 , • ■ ■ ) ^Nim) } of words such that 

(1) \w\ < m for all w G Wm, 

(2) for every integer k there is an m^ such that N{m) > mJ' for all m ^ I such that m > ruk, and 

(3) for all 1 <i,j < N{m), UjWiVj £ L iff i — j , 

then L cannot be recognized by AM(2PFA). 

We are now ready to prove 
Theorem 13. L^pai cannot be recognized by AM(2PFA). 

Proof. Let I be the set of all positive integers. For each m G I, let N{m) — 2™, and let wi, ..., wjv(m) 
be an ordering of all words from {a, 5}™. Let Wm = {wi,W2, ■ ■ ■ ,WN(m)}- With such a Wm, with 
Ui = \ (the empty word)and Vi = awf for all i, then for all 1 < i, j < N{m), UjWiVj G Lmpai if and 
only Hi — j. According to Lemma [T^ the language Lmpai cannot be recognized by AM(2PFA) and 
theorem has been proved. D 

From the last theorem and from Theorem [7] it follows: 
Corollary 14. QAM(2QCFA) are more powerful than AM(2PFA). 

3.3 Recognition of the language Lknapsack 

In this subsection, we consider a language, over the alphabet {0, 1, #}, Lknapsack = {^#ai#a2# • • • #a„ 
such that ai, • • • , a„, b G 1{0, 1}*, and there exists a set / C {1, • • • ,iV} such that v{b) ~ J2iei ^i^i)}' 
where v{x) is the number such that x is its binary representation. Lknapsack is actually the 0-1 knap- 
sack problem, which is NP-complete. Yakaryilmaz studied QAM with the verifier augmented with a 
fixed-size quantum register in the Arthur- Merlin proof system |32[ I33j and proved that Lknapsack can 
be recognized by QAM whose verifier is a 2QCFA which uses superoperators. Using an idea from 
[331 132] (coding of binary strings into the amplitudes of quantum states), we prove that the language 
Lknapsack Can also be recognized by QAM(2QCFA). Our model of 2QCFA is weaker than that of 
[3H[33] and different tools, comparing those from [3HI33], are needed to prove our result. 
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Theorem 15. For any e < 1/2, there exists a verifier-prover pair (P, Ve) of a QAM(2QCFA) to recog- 
nize the language Lknapsack with one-sided error e in the exponential running time 0(-{n6^ + log -)V 
where n is the length of the input. 

Proof. Let us assume that the input string w be of the form bjfai^a2i^ • ■ ■ T^^n, where 6, Oi G 1{0, 1}*. 
This can be easily checked by a FA. Otherwise, the input string w is rejected immediately. The main 
idea of the proof is as follows: we consider a 2QCFA verifier V^ that uses a quantum memory with 
states generated by the set of orthogonal quantum states {\qi) : z = 0, 1, • • • ,7}, where Igo), \qi)i \Q2) 
are used to encode the value of the binary strings. The verifier Ve starts to work with the initial 
quantum state \qo). The tape head of the verifier Ve moves from the left to right. Firstly, the verifier 
Ve encodes the value of h into the amplitudes of the quantum state \qi). With the help of the prover 
P, the verifier Ve will know whether Oi is selected or noo If Oi is selected, the value of Oi is calculated 
and encoded into the amplitudes of the quantum state \q2) and then subtracted from the amplitude of 
the quantum state \qi). When the right end-marker $ is reached, the verifier Ve measures the current 
quantum state. If the resulting quantum state is l^i), the input string w is rejected. Otherwise, the 
verifier continues as show in Figure [5j where the unitary operators and projective measurements are 
as follows: 



If the input string w is not of the form 6:?^ai#a2# • • • i^ani^, where b, aj G 1(0, 1}* (this can be easily 
checked by a FA), w is rejected. Otherwise, repeat the foUowing ad infinitum: 

1. Move the tape head to the right symbol of the left end-marker. 

2. While the currently scanned symbol cr is not '#', do the following: 

2.1 Apply Ua- on the current quantum state, where U^j is defined on the text. 

2.2 Measure the current quantum state with Mjor = {Pf: Pr}- 

2.2.1 If the measurement result is /, move the tape head one square to the right. 

2.2.2 Otherwise, set the quantum state to \qo) and start a new iteration. 

3. While the currently scanned symbol is not the right end-marker, do the following: 

3.1 If the Prover informs the verifier that ai is not selected, move the tape head to the symbol '^' 
that is left of a^-^i. 

3.2 Otherwise, move the tape head one square to the right. 

3.2.1 Wliile the currently scanned symbol is not '#', do the following: Apply U'^ on the current 
quantum state, where a is the currently scanned symbol. Measure the quantum state with 

Mfor. 

3.2.1.1 If the measurement result is /, move the tape head one square to the right. 

3.2.1.2 Otherwise, set the quantum state to |^o) ^'ii'^ start a new iteration. 

3.2.2 Apply U^ on the current quantum state and then measure the quantum state with Mfor- 

3.2.2.1 If the measurement result is /, move the tape head one square to the right. 

3.2.2.2 Otherwise, set the quantum state to \qo) and start a new iteration. 

4. Measure the currently quantum state with Mfin. If the result is not |(/o), reject. 

5. Move the head to the cell on the left from the right end-marker and set a special register jiag to 0. 

6. Until the currently scanned symbol is not the left end-marker, do the following: Simulate k coin-flips. 
Set flag to 1 if not all outcomes are "heads". Move the head one cell left. 

7. \i flag =0, accept. 



Figure 5: Description of the behavior of the verifier Ve of the pair (P, Ve) when recognizing the language 
Lknapsack- The choicc of k depends on e, as discussed in the text. 



^Consider the equation v{b) = Yliai'^^^'^) ~ ET^i Ci^('^i); where Ci G {0, 1}. Ci = 1 means a^ is selected. 



17 



t/n = x 



U' = ^ 



2 V6 V6 



M 



for 



j 1 








76 
2 


2 





\ 






( 1 








-1 


2 





\ 





2 





















1 


2 





1 

















1 


76 
2 


76 
2 


















1 








1 


2 


/6 
2 

2 






2 

76 
2 


-1 






-1 










,Ui = 


1 
V6 


2 



-1 
1 








-2 


-1 
-1 

























2 















2 











-1 1 




















2 












-1 








1 


2 


V 

















2) 






lo 














-2 


1 1/ 


/ 1 








_76 
2 


76 
2 





\ 






/ 1 








-1 


2 





(37) 
\ 





1 





76 
2 


76 
2 















1 











1 


2 








2 


















1 





2 


1 











2 
76 
2 


2 

76 

2 






-1 






-1 










,u[^ 


1 
V6 


2 







-1 
1 




-2 


-1 
-1 

























2 












2 














-1 1 




















2 









-1 











1 


2 


V 

















2 y 






lo 














-2 


1 1/ 






























(38) 










/ 1 








1 





\ 























1 


-1 


3 



































3 1 


-1 





















t/# = 


1 








1 






- 

1 






-1 
3 
3 1 
3 
3 






1 
V2 








V2 ) 


1 








(39) 


{Pf,Pr} 


and Mfin = {Pt 


: i = 


0- 


2 

•• ,7}, where P/ = ) \\q. 


)fel, 
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Unitary operators Uq and Ui are used to encode the value of b, Uq and U[ are used to encode the 
value of tti, U^ is used to subtract the amplitude of \q2) from the amplitude of \qi), respectively. The 
projective measurement Mfor is used to keep the quantum state in span{\qQ) , |(ji), |(j'2)}- 

Lemma 16. Setting the quantum state to the initial state in Step 2.2.2 can he done by a projective 
measurement and unitary operators. 

Proof. Let the current quantum state be jV') — X]i=o '^i\li)i ^^^"^ the projective measurement Mfin be 
performed on \^). If the classical measurement result is i, then the resulting quantum state will be 
l^i). By applying the unitary operator Ui = |<Zo)('i'i| on the state \qi), the state |go) is obtained. D 

Completeness condition: If the input string w E Lknapsack, then the all-powerful prover can 
make the right choice of a^ and tells that to the verifier during their communications, step by step. 



Let Gj-^ , Qj 



be strings selected by the prover (selection is not unique) where jp < jq ii p < q 



and w(&) =Ei=iw(aj,)- 
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Lemma 17. // the input w £ Lknapsack, then the quantum state of the verifier V^ will be \qo) after 
Step 4- 

Proof. Let b ~ 6162 •••&;• The quantum state of the verifier V^ after the string b is read is (see 
Appendix A for a detail proof) 

v(b) 



li^b) 



m=iiPfUbj\<io) ^ 1 



(41) 



V J 

Let fljj = aj-^-^aj-^2 ■ ■ ■a.j_^^,. The quantum state of the verifier V^ after the string aj-^ is read is (see 
Appendix A for a detail proof) 



,, , Y{\=i{PfK,JWb 



\m[^i{PfU'aJ\'^,)\\ ^l + v{bf+v{a,,Y 



( 1 \ 

v{b) 
w(ajj 



(42) 



V / 

Afterwards, the unitary operator C/^ and the projective measurement Mfor are performed. If the 
outcome of the measurement is / (that is the quantum state is in span{\qo) , \qi), \q2)}), the resulting 
quantum state is 



l^;>#a,i#) 



PfU#K=iiPfU'.Mb) 



1 



/ 1 \ 

v{b)-v{aj,) 




\PfU#ir,=APfUL,J\i^b)\\ ^l + iv{b)-v{a,,W 

\ / 

Therefore, when the verifier reaches the end of Step 4, the quantum state of the verifier is 



(43) 



li'w) = 



^l + iv{b)~j:t=iv{a,,)f 



( 1 
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/ 1 \ 
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I 0/ 



190) 



(44) 



D 



The resulting quantum state in Step 4 will be jgo) with probability 1. After Steps 5 the input is 
accepted with the probability Pa — 2^*^ and is rejected with the probability Pr — 0. If the whole 
process is repeated for infinitum, the accepting probability is 



Pr[{P\V,) rejects w] = ^(1 - P„)*(l - Pr^Pa = 



Pn 



-'a -. 



P ^ P — P P P 



(45) 
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Soundness condition: If the input string w ^ L 



k and n — \w\, no matter what choices 



knapsac 

the prover makes, there is not / C {1, • • • , N} such that v{b) = X^ie/ '^('^i)- Suppose a^j , Uj^ , ■ ■ ■ , aj^ 
be the strings selected by the prover where jp < jq ii p < q. 

Lemma 18. // the input string w ^ Lknapsack, then for any prover P* the verifier V^ rejects w after 
Step 4 with the probability at least i 

Proof. According to the analysis in Lemma 1171 the quantum state at the beginning of Step 4 is 



/ 



l^« 



^i + M6)-n=i«KJf 



\ 



«W - Ei=i ^'(o 



(46) 



Obviously, \v{b)—J2i=i'^{0'ji)\ ^ 1- Therefore, the probability of getting the state \qi) and rejecting 



the input w is at leat ^. 



D 



If ui ^ Lknapsack , then, according to Lemma I18[ for any prover P* the verifier V^ rejects the input 
after Step 4 with the probability 

(47) 



^^>^ 



and the input is accepted after Steps 5 to 7 with the probability 

P. = 2'K 



(48) 



If the whole computation process is repeated indefinitely, the probability that the verifier rejects the 
input is (taking into consideration that fc = 1 + [logj 1/e]) 



Fr[(P*, K) rejects w] =^(1 - Fj^l - PrTPr = 



■i>0 



>- 



Pr 



Pa+Pr 



> 



1/2 



> 



1/2 



l/2-£/2+l/2 1 + e 



>l-e. 



(49) 
(50) 



Time analysis: Let n = \w\. The probability of getting as the outcome / in the projective 
measurement Mfor is at least | in the whole process in Figure [5j Hence, the probability for the 
verifier to reach Step 4 in one iteration is at least (^) .If every outcome of the projective measures 
Mfor in all computation steps in an iteration is /, then the running time from Step 1 to Step 4 is 
0(n). Therefore, the expecting running time from Step 1 to Step 4 is less than 

Efl-G)T '(lX■^■0{n)^6-■0{n). (51) 



The running time of Step 5 is 0(fc). The halting probability is n (^) in both cases, so the expected 
number of repetitions of the algorithm is 0(2'^) in both cases. Hence the expected running time of 
the QAM (P, Ve) is 0(2*^ • (6" • 0(n) + 0(fc))) and therefore 0(i(n6" + log i)) . D 

Dwork and Stockmeyer |9^ proved that the set of languages recognized by AM(2PFA) is a proper 
subset of P. However, in the previous theorem we prove that the language Lknapsack, which is NP 
complete, can be recognized by QAM(2QCFA). This is another indication that QAM(2QCFA) are 
more powerful than AM(2PFA). 
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3.4 Recognition of other languages 

In this subsection, we sketch proofs for languages: 

Li — {w\ 3s, i, M, u S S*, w — sbt — ubv, \s\ — \v\}, (52) 

L2 = {w\ 3s, i, M, u e S*, w = sat = ubv, \s\ = \v\}, (53) 

that they can be recognized by QAM(2QCFA). Freivalds et al. [10] proved that the language Li is 
nonstochastic, whereas L2, the set of nonpalindromes, is stochastic. We prove that these languages 
can be recognized by QAM(2QCFA) in polynomial expected running time. 

Theorem 19. For any e < 1/2, there exists a verifier-prover pair {P, Vg) of a QAM(2QCFA) that 
can recognize Li with one-sided error e in the expected running time 0{- {n^ -\- n^log-^^, where n 
is the length of the input. 

Proof. If w £ Li, then w can be of one of the following three types 

Type 1. w — sbt — ubv, where \s\ = \u\ = \v\. 

Type 2. w — sbt = ubv, where \s\ > \u\. li s — ubx, where a; € S*, then w — ubxbt and \u\ — \w\ — \v\ — l = 
\w\-\s\-l = \t\. 

Type i. w = sbt — ubv, where \s\ < \u\. If u = sby, where ?; e E*, then w — sbybv and \s\ — \v\. 

Therefore, Li — {w \ 3u, w, z S S*, w — ubv or w — ubzbv, where |u| = \v\}. 

Using the method of the proof of Theorem [1] the quantum state of the verifier will be rotated by 
an angle a every time a symbol in u is scanned. The prover just tells the verifier the right time to 
stop rotation and of which type the input is. After the verifier checks the input is of the form b or bzb, 
the prover tells the verifier the right position to resume rotation of the quantum state by the angle 
—a. The rest of the proof is similar to the one in Theorem [1] 

D 

Theorem 20. For any s < 1/2, there exists a verifier-prover pair {P,Ve) of a QAM(2QCFA) that 
recognizes the language L2 with one-sided error e in the expected running time O (- (n^ + n^ log -)) , 
where n is the length of input. 

Proof. Suppose w £ L2. The input string w can be of one of the following types 

Type \. w — sat — ubv where \s\ > \u\. Let s — ubx where a; e E*, then w — ubxat and \u\ = 

\w\-\v\-l^\w\-\s\-l^\t\. 

Type 2. w = sat = ubv where \s\ < \u\. Let u = say where y e E*, then w — saybv and \s\ = \v\. 

Therefore, L2 — {w \ 3u, u, z e E*, w — uazbv or w = ubzav, where |m| = |w|}. 

To show that the proof method of Theorem [T] will be used. The prover will tell the verifier 
two positions - the position of the symbol after u and the position of the symbol before v. The 
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verifier rotates its quantum state by an angle a every time it scans a symbol in u and then checks 
whether symbols in these two positions, pointed out by the prover, are different. If they are different, 
the quantum state of the verifier is rotated by an angle —a every time a symbol in v is scanned. 
Otherwise, the input string is rejected. The rest of the proof is similar to that in Theorem [TJ 

D 



4 Concluding remarks 

We have explored quantum interactive proof systems with 2QCFA verifiers and classical com- 
munication. We have focused on the public coin version of the interactive proof systems - namely 
QAM(2QCFA). We have showed that QAM(2QCFA) are more powerful than their classical counter- 
parts AM(2PFA). In particular, we have shown several specific results demonstrating that: (1) The 
language Lmiddie — {xay\x,y e S*,!] — {a, 6},|a;| — \y\} can be recognized by QAM(2QCFA) in a 
polynomial expected running time, but cannot be recognized by AM(2PFA) in polynomial expected 
running time. (2) The language L^pai — {xax^ \x G {a, b}*} can be recognized by QAM(2QCFA) in 
an exponential expected running time, but cannot be recognized by AM(2PFA) at all. (3) The 0-1 
knapsack language can be recognized by QAM(2QCFA) in an exponential expected running time. 

A related open problem, first mentioned in [9 , is whether AM(ptime-2PFA) are more powerful 
than 2PFA(ptime). Our attempts (and that of others) to show that AM(ptime-2PFA) are indeed more 
powerful failed so far. However, results of this paper indicate, that the answer is likely positive when it 
comes to the quantum case. Indeed, the language L,niddie can be recognized by QAM(ptime-2QCFA), 
but it seems that it can not be recognized by 2QCFA. That would imply that QAM(ptime-2QCFA) 
are more powerful than 2QCFA. 
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Appendix A: Proofs of Equalities [4T] and l42 



We prove Equality |4T] by induction on the length of string b. If \b\ = 1, then b = "1". Therefore, 
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Suppose that ioxb — w and |w| > 1, the equality holds, that is 
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We proye the equation holds for b = wa. If cr = '0', then 
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and 



li'wo) 



If CT = '1', then 



||f/o|^^)|| VI + (2«H)2 
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The proof of Equahtv 1421 is similar. 
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